Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

10.0

HIGH

CVE-2015-4883

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860....

Affected Products : jdk jre
Published: Oct. 21, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-4433

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers...

Affected Products : linux_kernel flash_player mac_os_x windows air air_sdk air_sdk_\&_compiler
Published: Jul. 09, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-3127

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler b...

Affected Products : linux_kernel flash_player mac_os_x windows air air_sdk air_sdk_\&_compiler
Published: Jul. 09, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-3117

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers...

Affected Products : linux_kernel flash_player mac_os_x windows air air_sdk air_sdk_\&_compiler
Published: Jul. 09, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-3072

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-...

Affected Products : mac_os_x acrobat acrobat_reader windows
Published: May. 13, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-3038

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a differ...

Affected Products : linux_kernel flash_player mac_os_x opensuse suse_linux_enterprise_desktop windows enterprise_linux_server_supplementary enterprise_linux_desktop_supplementary enterprise_linux_server_supplementary_eus enterprise_linux_workstation_supplementary +1 more products
Published: Apr. 14, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2021-24026

A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for iOS prior to v2.21.32, and WhatsApp Business for iOS prior to v2.21.32 coul...

Affected Products : whatsapp whatsapp_business
Published: Apr. 06, 2021

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2015-0857

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar file....

Affected Products : debian_linux tardiff
Published: May. 06, 2016

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-0338

Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors....

Affected Products : linux_kernel flash_player mac_os_x windows
Published: Mar. 13, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-0333

Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a differ...

Affected Products : linux_kernel flash_player mac_os_x windows
Published: Mar. 13, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-0326

Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via unknow...

Affected Products : linux_kernel flash_player mac_os_x windows
Published: Feb. 06, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2015-0240

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a free operation on an uninitialized stack pointer, which allows remote attackers to execute ar...

Affected Products : ubuntu_linux enterprise_linux samba suse_linux_enterprise_desktop suse_linux_enterprise_server suse_linux_enterprise_software_development_kit
Published: Feb. 24, 2015

Modified: May. 09, 2025
10.0

HIGH

CVE-2014-9488

The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read....

Affected Products : opensuse less
Published: Apr. 14, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2014-8836

The Bluetooth driver in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (arbitrary-size bzero of kernel memory) via a crafted app....

Affected Products : mac_os_x mac_os_x
Published: Jan. 30, 2015

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2014-8460

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8457 and CVE-2014-9159....

Affected Products : mac_os_x acrobat acrobat_reader windows
Published: Dec. 10, 2014

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2021-23894

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serializ...

Affected Products : database_security
Published: Jun. 02, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-23857

Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system....

Affected Products : rexroth_indramotion_xlc_firmware rexroth_indramotion_mlc_l20_firmware rexroth_indramotion_mlc_l40_firmware rexroth_indramotion_mlc_l25_firmware rexroth_indramotion_mlc_l45_firmware rexroth_indramotion_mlc_l65_firmware rexroth_indramotion_mlc_l75_firmware rexroth_indramotion_mlc_l85_firmware rexroth_indramotion_mlc_xm22_firmware rexroth_indramotion_mlc_xm21_firmware +14 more products
Published: Oct. 04, 2021

Modified: Nov. 21, 2024
10.0

CRITICAL

CVE-2021-23856

The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending the client a manipulated URL....

Affected Products : rexroth_indramotion_mlc_l20_firmware rexroth_indramotion_mlc_l40_firmware rexroth_indramotion_mlc_l20 rexroth_indramotion_mlc_l40
Published: Oct. 04, 2021

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2014-2978

The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers an out-of-bounds writ...

Affected Products : opensuse suse_linux_enterprise_server linux_enterprise_desktop linux_enterprise_software_development_kit linux_enterprise_workstation_extension directfb
Published: Jun. 11, 2014

Modified: Apr. 12, 2025
10.0

HIGH

CVE-2014-2171

Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796....

Affected Products : telepresence_tc_software telepresence_te_software
Published: May. 02, 2014

Modified: Apr. 12, 2025

Showing 20 of 293186 Results

1
...
187
188
189
190
191
192
193
...
14660

Browse by Apps

Latest CVE Feed

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

10.0

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable